Remote Incident Manager Jobs
Remote incident manager jobs are in active demand across the U.S., with remote-first firms and distributed engineering teams hiring for on-call coordination, post-incident reviews, and real-time response ownership. Industries hiring remotely include technology, financial services, and cloud infrastructure. Employers hiring right now include CrowdStrike, General Dynamics Information Technology, and BILL. See the openings below and apply to the ones that match your experience.
Find Remote Incident Manager JobsOverview
Showing 5 of 17+ Remote Incident Manager jobs
Security - San Francisco and US - Remote
About the team
Ensuring that advanced AI benefits humanity requires protecting the research, infrastructure, and trust that make its development and deployment possible. OpenAI Security defends our model IP, people, products, and users against sophisticated adversaries across GPU supercomputing, multicloud environments, datacenters, and emerging agent systems. The Security Incident Response Team (SIRT) leads the response when those defenses are tested—establishing what happened, limiting harm, and strengthening our ability to protect frontier AI.
About the role
We’re looking for a hands-on technical leader to build the incident response team that protects OpenAI as AI capabilities and the threats surrounding them evolve. You will command consequential incidents, lead technically demanding investigations, and make containment and recovery decisions when evidence is incomplete and the stakes are high. You will also shape how frontier models change incident response: using OpenAI’s own technology to help responders connect evidence, test hypotheses, and act effectively at a scale that manual workflows cannot support. Partnering with Research, Infrastructure, Product Security, Enterprise Security, IT, and Engineering, you will build exceptional responders, dependable AI-powered capabilities, and stronger defenses through every investigation.
In this role, you will:
Hire, coach, and develop exceptional incident responders who combine investigative depth, engineering ability, and sound judgment. Build a team that challenges assumptions, surfaces uncertainty early, and uses AI to expand its capabilities. Develop technical leaders who can make and explain difficult decisions under pressure.
Lead incident command for complex threats to OpenAI’s research, products, and infrastructure. Establish severity and scope, coordinate investigation workstreams, and weigh containment options against ongoing exposure and disruption to research or production.
Build and ship agentic capabilities using OpenAI’s models for evidence collection engineers to integrate tools and data, evaluate accuracy and failure modes, and ensure reliable, auditable operation with human approval for consequential actions.
Set investigation standards for sophisticated adversaries and insider threats across identity, endpoints, cloud, Kubernetes, and large-scale compute. Help responders reconstruct activity, test competing hypotheses, preserve evidence, and make uncertainty explicit.
Drive incidents to verified closure. Work with accountable owners to validate containment and recovery, document remaining risk, and track corrective actions that reduce the likelihood or impact of recurrence.
Coordinate with engineering, infrastructure, legal, privacy, and other stakeholders throughout an incident. Give executives clear updates on impact, uncertainty, decisions, and the next update without overstating what the evidence supports.
Build sustainable on-call coverage, escalation paths, and handoffs across regions. Balance urgent response with training and planned improvements, and protect the team’s ability to recover after demanding incidents.
Build readiness into new research and infrastructure capabilities with their owners. Exercise playbooks, escalation paths, and containment options, including scenarios involving agents operating across systems at scale.
Turn incident evidence into stronger defenses with Detection Engineering teams. Identify what should have exposed an intrusion earlier, what prevented a faster or more confident investigation, and which capabilities would have changed the outcome. Translate those findings into tested improvements with clear owners.
Prioritize improvements using incident outcomes and readiness evidence. Measure response quality and effectiveness, make tradeoffs explicit, and address recurring friction without reducing success to ticket volume or speed alone.
You might thrive if you:
You are motivated by the responsibility of protecting frontier AI. You want to understand how powerful new systems can fail or be compromised, help their builders move forward securely, and use the same advances in AI to strengthen defenders.
You have managed security responders or a closely related technical operations team, with a record of hiring, coaching, delivering candid feedback, and helping people grow.
You bring strong AI fluency and an AI-first builder mindset. You have used models or agents to improve real investigation or response workflows and can show validated results. You understand their failure modes and pair ambitious automation with rigorous evaluations and human judgment.
You are a hands-on builder with deep investigation expertise across identity, cloud, host, and infrastructure systems. You can prototype tools, write scripts or code, and coach responders through difficult evidence questions, including unfamiliar parts of the stack.
You have commanded consequential incidents involving capable adversariesation, recognize when new evidence requires a change in direction, and remain accountable for the consequences.
You communicate clearly with engineers, executives, and legal or privacy partners. You can explain uncertainty, document decision rationale, and keep stakeholders aligned as facts change.
You have improved on-call operations, response playbooks, or exercise programs, and understand how workload, handoffs, and team health affect response quality.
You can prioritize a small number of meaningful improvements, influence partners who own remediation, and follow through until the agreed outcome has been verified.
About OpenAI
OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core the full spectrum of humanity.
We are an equal opportunity employeration, or other applicable legally protected characteristic.
Background checks for applicants will be administered in accordance with applicable lawation technology systems and related data security obligations.
To notify OpenAI that you believe this job posting is non-compliant. No response will be provided to inquiries unrelated to job posting compliance.
We are committed to providing reasonable accommodations to applicants with disabilities.
At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.
Compensation
$401K – $510K + Offers Equity
The base pay offered may vary depending on multiple individualized factorsance-related bonus(es) for eligible employees, and the following benefits.
Medical, dental, and vision insurance for you and your family, with employer contributions to Health Savings Accounts
Pre-tax accounts for Health FSA, Dependent Care FSA, and commuter expenses (parking and transit)
401(k) retirement plan with employer match
Paid parental leave (up to 24 weeks for birth parents and 20 weeks for non-birthing parents), plus paid medical and caregiver leave (up to 8 weeks)
Paid time off: flexible PTO for exempt employees and up to 15 days annually for non-exempt employees
13+ paid company holidays, and multiple paid coordinated company office closures throughout the year for focus and recharge, plus paid sick or safe time (1 hour per 30 hours worked, or more, as required by applicable state or local law)
Mental health and wellness support
Employer-paid basic life and disability coverage
Annual learning and development stipend to fuel your professional growth
Daily meals in our offices, and meal delivery credits as eligible
Relocation support for eligible employees
Additional taxable fringe benefits, such as charitable donation matching and wellness stipends, may also be provided.
More details about our benefits are available to candidates during the hiring process.
This role is at-will and OpenAI reserves the right to modify base pay and other compensation components at any time based on individual performance, team or company results, or market conditions.
Security - San Francisco and US - Remote
About the team
Ensuring that advanced AI benefits humanity requires protecting the research, infrastructure, and trust that make its development and deployment possible. OpenAI Security defends our model IP, people, products, and users against sophisticated adversaries across GPU supercomputing, multicloud environments, datacenters, and emerging agent systems. The Security Incident Response Team (SIRT) leads the response when those defenses are tested—establishing what happened, limiting harm, and strengthening our ability to protect frontier AI.
About the role
We’re looking for a hands-on technical leader to build the incident response team that protects OpenAI as AI capabilities and the threats surrounding them evolve. You will command consequential incidents, lead technically demanding investigations, and make containment and recovery decisions when evidence is incomplete and the stakes are high. You will also shape how frontier models change incident response: using OpenAI’s own technology to help responders connect evidence, test hypotheses, and act effectively at a scale that manual workflows cannot support. Partnering with Research, Infrastructure, Product Security, Enterprise Security, IT, and Engineering, you will build exceptional responders, dependable AI-powered capabilities, and stronger defenses through every investigation.
In this role, you will:
Hire, coach, and develop exceptional incident responders who combine investigative depth, engineering ability, and sound judgment. Build a team that challenges assumptions, surfaces uncertainty early, and uses AI to expand its capabilities. Develop technical leaders who can make and explain difficult decisions under pressure.
Lead incident command for complex threats to OpenAI’s research, products, and infrastructure. Establish severity and scope, coordinate investigation workstreams, and weigh containment options against ongoing exposure and disruption to research or production.
Build and ship agentic capabilities using OpenAI’s models for evidence collection engineers to integrate tools and data, evaluate accuracy and failure modes, and ensure reliable, auditable operation with human approval for consequential actions.
Set investigation standards for sophisticated adversaries and insider threats across identity, endpoints, cloud, Kubernetes, and large-scale compute. Help responders reconstruct activity, test competing hypotheses, preserve evidence, and make uncertainty explicit.
Drive incidents to verified closure. Work with accountable owners to validate containment and recovery, document remaining risk, and track corrective actions that reduce the likelihood or impact of recurrence.
Coordinate with engineering, infrastructure, legal, privacy, and other stakeholders throughout an incident. Give executives clear updates on impact, uncertainty, decisions, and the next update without overstating what the evidence supports.
Build sustainable on-call coverage, escalation paths, and handoffs across regions. Balance urgent response with training and planned improvements, and protect the team’s ability to recover after demanding incidents.
Build readiness into new research and infrastructure capabilities with their owners. Exercise playbooks, escalation paths, and containment options, including scenarios involving agents operating across systems at scale.
Turn incident evidence into stronger defenses with Detection Engineering teams. Identify what should have exposed an intrusion earlier, what prevented a faster or more confident investigation, and which capabilities would have changed the outcome. Translate those findings into tested improvements with clear owners.
Prioritize improvements using incident outcomes and readiness evidence. Measure response quality and effectiveness, make tradeoffs explicit, and address recurring friction without reducing success to ticket volume or speed alone.
You might thrive if you:
You are motivated by the responsibility of protecting frontier AI. You want to understand how powerful new systems can fail or be compromised, help their builders move forward securely, and use the same advances in AI to strengthen defenders.
You have managed security responders or a closely related technical operations team, with a record of hiring, coaching, delivering candid feedback, and helping people grow.
You bring strong AI fluency and an AI-first builder mindset. You have used models or agents to improve real investigation or response workflows and can show validated results. You understand their failure modes and pair ambitious automation with rigorous evaluations and human judgment.
You are a hands-on builder with deep investigation expertise across identity, cloud, host, and infrastructure systems. You can prototype tools, write scripts or code, and coach responders through difficult evidence questions, including unfamiliar parts of the stack.
You have commanded consequential incidents involving capable adversariesation, recognize when new evidence requires a change in direction, and remain accountable for the consequences.
You communicate clearly with engineers, executives, and legal or privacy partners. You can explain uncertainty, document decision rationale, and keep stakeholders aligned as facts change.
You have improved on-call operations, response playbooks, or exercise programs, and understand how workload, handoffs, and team health affect response quality.
You can prioritize a small number of meaningful improvements, influence partners who own remediation, and follow through until the agreed outcome has been verified.
About OpenAI
OpenAI is an AI research and deployment company dedicated to ensuring that general-purpose artificial intelligence benefits all of humanity. We push the boundaries of the capabilities of AI systems and seek to safely deploy them to the world through our products. AI is an extremely powerful tool that must be created with safety and human needs at its core the full spectrum of humanity.
We are an equal opportunity employeration, or other applicable legally protected characteristic.
Background checks for applicants will be administered in accordance with applicable lawation technology systems and related data security obligations.
To notify OpenAI that you believe this job posting is non-compliant. No response will be provided to inquiries unrelated to job posting compliance.
We are committed to providing reasonable accommodations to applicants with disabilities.
At OpenAI, we believe artificial intelligence has the potential to help people solve immense global challenges, and we want the upside of AI to be widely shared. Join us in shaping the future of technology.
Compensation
$401K – $510K + Offers Equity
The base pay offered may vary depending on multiple individualized factorsance-related bonus(es) for eligible employees, and the following benefits.
Medical, dental, and vision insurance for you and your family, with employer contributions to Health Savings Accounts
Pre-tax accounts for Health FSA, Dependent Care FSA, and commuter expenses (parking and transit)
401(k) retirement plan with employer match
Paid parental leave (up to 24 weeks for birth parents and 20 weeks for non-birthing parents), plus paid medical and caregiver leave (up to 8 weeks)
Paid time off: flexible PTO for exempt employees and up to 15 days annually for non-exempt employees
13+ paid company holidays, and multiple paid coordinated company office closures throughout the year for focus and recharge, plus paid sick or safe time (1 hour per 30 hours worked, or more, as required by applicable state or local law)
Mental health and wellness support
Employer-paid basic life and disability coverage
Annual learning and development stipend to fuel your professional growth
Daily meals in our offices, and meal delivery credits as eligible
Relocation support for eligible employees
Additional taxable fringe benefits, such as charitable donation matching and wellness stipends, may also be provided.
More details about our benefits are available to candidates during the hiring process.
This role is at-will and OpenAI reserves the right to modify base pay and other compensation components at any time based on individual performance, team or company results, or market conditions.
See All 17 Remote Incident Manager Jobs
Find roles that match your experience and apply in just a few clicks.
Find Remote Incident Manager JobsRemote Incident Manager Job Market
Who's Hiring
Top Industries Hiring
- Technology & Software
What Employers Look For
The qualifications that appear most often in remote incident manager jobs.
- 3 or more years of experience managing IT or operational incidents in a production environment
- ITIL 4 Foundation certification or equivalent service management framework knowledge
- Proficiency with incident management platforms such as PagerDuty, ServiceNow, or Jira Service Management
- Strong verbal communication skills for leading war-room bridge calls under pressure
- Experience writing and presenting post-incident reviews and root cause analyses
- Bachelor's degree in information technology, computer science, or a related field
Tips for Your Remote Incident Manager Job Search
Apply early to remote roles that fit
Migrate Mate lists remote incident manager openings from across the U.S. in one place, so you can find roles that match your experience and apply directly without sorting through mixed location results.
Show your async communication skills
Remote incident manager roles live and die on written communication. Include examples of incident summaries, blameless postmortems, or runbooks you authored, because remote employers read these as proof you can coordinate response without a war room.
Highlight your on-call toolchain experience
Call out specific tools you have used for alerting, triage, and escalation, such as PagerDuty, Opsgenie, or VictorOps. Remote teams assume you can operate these independently from the start, so naming them directly removes a common screening hesitation.
Prepare for remote incident simulations in interviews
Distributed engineering teams often run a live or tabletop incident scenario during interviews. Practice walking through severity classification, stakeholder communication cadence, and postmortem facilitation out loud, because remote hiring managers judge your process as much as your technical knowledge.
Remote Incident Manager Jobs: Frequently Asked Questions
How do I get a remote incident manager job?
Target companies with distributed engineering teams, because those organizations build incident response processes that work asynchronously by default. Remote employers screen for written communication skills, comfort with async tools like Slack and PagerDuty, and the ability to coordinate cross-functional response without in-person escalation. Candidates who can show documented runbooks, blameless postmortem experience, or on-call rotation ownership stand out.
Which companies hire remote incident managers?
Companies hiring remote incident managers right now include CrowdStrike, General Dynamics Information Technology, and BILL, based on current remote listings on Migrate Mate as of November 2026. Remote-first technology firms and distributed SaaS teams account for the largest share of these openings, alongside cloud services and fintech organizations managing 24/7 uptime obligations across time zones.
Can you get a remote incident manager job with no experience?
Yes, but remote entry-level incident manager roles are harder to land because employers expect you to triage and coordinate independently from day one. You can open the door by earning an ITIL Foundation certification, building familiarity with on-call tools like PagerDuty or Opsgenie, and documenting any helpdesk, NOC, or DevOps support work that involved incident triage, even informally.
Do you need a degree for remote incident manager jobs?
Not always. Many remote employers care more about hands-on incident response experience and certifications like ITIL or CompTIA than a formal degree. Demonstrating that you can own a major incident from detection through postmortem, communicate clearly under pressure in writing, and improve response processes over time carries more weight than your educational background alone.
Which industries hire the most remote incident managers?
The sectors hiring the most remote incident managers are Technology & Software, based on current remote listings on Migrate Mate as of November 2026. These industries rely on distributed teams and continuous service availability, making remote incident managers essential for coordinating response across engineers, stakeholders, and vendors in different time zones.
See All 17 Remote Incident Manager Jobs
Find roles that match your experience and apply in just a few clicks.
Find Remote Incident Manager Jobs